Implementação de um ponto de acesso para redes 802.11b baseado no OpenBSD

• Demetrio S. D. Carrión UFRJ
• Luís Felipe M. de Moraes UFRJ

DOI: https://doi.org/10.5753/sbseg.2003.21249

Abstract

The security of wireless local area networks represents a new challenge in the information security field. The flaws disclosed in WEP, the security protocol used by 802.11b networks, have driven the academic community and the industry in search for new security solutions. This paper describes the development and the implementation of an access point based on the OpenBSD operational system in conjunction with several open source softwares, as well as the construction of an infrastructure to support this secure implementation in a local area network based on 802.11b standard.

References

Borisov, N., Goldberg, I. e Wagner D. (2001) “Intercepting Mobile Communications: The Insecurity of 802.11”, 7th Annual International Conference on Mobile Computing and Networking.

Casole, M. (2002) “WLAN Security – Status, Problems and Perspective”, European Wireless 2002

Drach, S. (1999), “DHCP Option for The Open Group's User Authentication Protocol”, RFC 2485

Dyck, T. (2002) “OpenBSD 3.2 Gets It Right”, artigo publicado em http://www.eweek.com/article2/0,3959,640713,00.asp

Fluhrer, S., Mantin, I. e Shamir, A. (2001) “Weaknesses in the key scheduling algorithm of RC4”, Eighth Annual Workshop on Selected Areas in Cryptography.

NetLogon, Ferramenta de autenticação centralizada, Páfina visitada em 2002, http://www.unit.liu.se/dokument/natverk/netlogon.html

NoCatAuth, Ferramenta de autenticação centralizada, Página visitada em 2002, http://www.nocat.org

OASIS, Ferramenta de autenticação centralizada, Página visitada em 2002, http://software.stockholmopen.net/

Open1X, Implementação de software aberto do padrão 802.1x, Página visitada em 2002, http://www.open1x.org

OpenBSD, Sistema operacional de código aberto e gratuito baseado no BSD 4.4, Página visitada em 2002, http://www.openbsd.org

Shaw, Derek G. e BOSCIA, Nichole K. (2002) “Wireless Firewall Gateway White Paper – Revision 3”, NASA Advanced Supercomputing Division

SSH Sentinel, Cliente VPN para a plataforma Windows, página web visitada em 2003 http://www.ssh.com/products/security/sentinel/

Srisuresh, P. e Egevang K. (2001) “Traditional IP Network Address Translator (Traditional NAT)”, RFC 3002

Stalings, William, “Cryptography and Network Security – Principles and Practice”, 2 ed, Prentice Hall, 1999, p. 399-440

Vaughan-Nichols, Steven J. (2001) “OpenBSD: The most secure OS around”, artigo publicado [link]

Walker, Jesse R. (2000) “Unsafe at any key size: An Analysis of the WEP encapsulation”, IEEE Document 802.11-00/362.